$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft File: KknhDg5wlLReuhwW-WN-HOxnvcY.mft (raw, json) Hash identifier: VzczsvrlYGw8068YiLTbhmU4n9hxtyJDV2fcNEpEpGc= Subject key identifier: 3B:D2:D4:57:0D:84:C2:45:AC:A0:3E:88:CC:C2:D3:98:C6:9A:6B:E4 Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Certificate serial: 01A0DACD04657CF970231B49AEB473DBA686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft Manifest number: 02A9 Signing time: Fri 25 Sep 2026 23:01:04 +0000 Manifest this update: Fri 25 Sep 2026 23:01:04 +0000 Manifest next update: Sat 26 Sep 2026 23:01:04 +0000 Files and hashes: 1: CQnRFbws69KUV1eDOh7tfsMPWcY.roa (hash: XQrjplYUGhogLSVTsLi+InaBCSnPLhVF2WDLQrbLme4=) 2: KknhDg5wlLReuhwW-WN-HOxnvcY.crl (hash: 0Bs5IXI0DB5WHC4Jp+Pi6xXfMSXf4DgBzgsvoDuf/SE=) 3: LsTr7Vivk39ZgCbG387swerRK6c.roa (hash: qnydcWksp1kG77yb//mZBlPJ1UQa9L4iT4xclFDE6nk=) 4: Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa (hash: G0/QzlmRMEQtlNEZ8lhOPdNMyp6Hv4D1m4DiR2+PyZA=) 5: XZZS0J9cNFB34TPouF3k8-ZfCvw.roa (hash: /aqeE5gEnv2LBAY7p2JR8leoHcxdA9dbAKTDFlT19hs=) 6: Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa (hash: x6gttKcvk6cgj+0qilLdOAO3qlZUqMHAp+PtTLr5hkc=) 7: _JIme0QPIMt9vEAapbO3X4DxZ6o.roa (hash: 2TlFaoRWvQThXcHP6fVI19fGDUkBsF3BMCmvRQGDI4o=) 8: bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa (hash: ddJ0XAD6t5QQElM8h1FtjnOAe1zaPavt5df6dzC3Pqs=) 9: m8zy49mlilgd1SPfU7e74Pq-L9w.roa (hash: 3ByWSNaUHf3Y97SFh9Lm+qACChqfIOs4+xqkpYGrpug=) 10: v22kTg0bTYFeeEWrApNqBfg_jxY.roa (hash: x8keV3yS66xLjOAZX4BOX56TvQOMZSSX31M99Vku2wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:cd:04:65:7c:f9:70:23:1b:49:ae:b4:73:db:a6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Validity Not Before: Sep 25 23:01:04 2026 GMT Not After : Sep 26 23:01:04 2026 GMT Subject: CN=3bd2d4570d84c245aca03e88ccc2d398c69a6be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7f:a6:75:87:c9:07:a8:8a:0c:dc:0d:8b:2f: f3:82:a4:ec:fe:69:c6:80:7b:a4:aa:86:75:10:65: 11:0f:c9:d9:f8:25:f4:af:f8:c1:3b:28:61:be:c4: e2:2f:03:40:bf:75:bf:07:af:1e:05:f8:b1:e7:99: b6:ff:4b:ba:9c:7b:e9:ed:f3:58:1d:b2:92:46:62: ce:10:cf:c9:55:e9:73:26:b5:68:e1:8c:81:64:d2: 78:87:92:a5:cf:ee:7d:2d:d7:8a:73:56:d3:1c:36: 18:a4:a2:0d:25:25:ac:f8:59:a4:b3:06:09:19:d6: f1:73:1a:d4:2d:48:64:24:49:de:e3:f1:de:01:eb: 31:c3:61:b9:98:03:38:89:0f:18:7c:4f:1d:66:20: e6:63:fc:3c:80:8b:59:9f:f3:47:95:7d:48:b5:b9: 5d:b3:10:80:4d:cb:25:3f:06:9e:07:92:f3:e2:50: c9:16:e0:39:74:de:12:77:55:bc:0f:4d:cf:11:aa: 88:02:ef:a7:ea:0a:67:61:39:87:f3:8c:c0:e5:e0: 44:8f:e3:7e:ea:02:43:cd:c9:f7:34:dd:60:56:56: b0:7b:ef:21:f6:6c:36:5f:57:1a:fd:fe:56:57:dc: 61:85:fd:1b:6f:9d:62:ce:03:25:e2:af:31:ae:d5: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D2:D4:57:0D:84:C2:45:AC:A0:3E:88:CC:C2:D3:98:C6:9A:6B:E4 X509v3 Authority Key Identifier: keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9f:fc:8c:39:41:aa:50:df:45:7f:b9:b0:82:b7:d9:83:b4: c7:4f:d5:79:00:2c:6a:1a:51:c8:23:e8:bd:7a:b3:7a:33:dc: 21:d0:55:b0:f7:bd:52:a1:93:41:57:46:37:0d:04:1b:5d:a6: 06:e5:ca:fd:de:e7:43:81:90:d5:95:ad:7c:78:90:90:4b:dd: 63:8e:39:44:2b:58:3f:71:65:77:d4:d1:b0:62:6b:61:4e:63: d5:5f:53:5a:d7:3d:03:e6:67:f8:53:a7:c0:f3:61:fb:b2:bc: 85:51:65:fb:5f:ae:7f:49:26:44:27:cb:9a:cc:99:48:8b:c3: 4e:07:1e:58:8c:26:1c:36:ee:7b:8c:ce:86:3a:6d:c8:f1:2e: 39:1b:85:b6:86:74:ce:ba:76:6c:a4:c8:19:3d:e2:ab:8b:f4: cc:16:16:29:d4:ee:07:c7:da:11:88:88:79:64:21:5b:8c:9a: fa:0a:74:54:f9:32:e6:28:cc:75:7e:2d:78:c4:14:5e:b0:0a: 63:fc:17:e3:bc:8c:4f:32:b7:69:d0:9a:af:b2:8a:0d:e7:f5: a8:c5:95:d3:5b:ae:81:aa:e9:d5:46:35:b6:3f:96:e7:09:08: 80:04:ad:5e:b2:27:74:35:17:c7:0f:86:83:da:11:e5:af:4b: b1:6c:68:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDazQRlfPlwIxtJrrRz26aGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2 N2JkYzYwHhcNMjYwOTI1MjMwMTA0WhcNMjYwOTI2MjMwMTA0WjAzMTEwLwYDVQQD EygzYmQyZDQ1NzBkODRjMjQ1YWNhMDNlODhjY2MyZDM5OGM2OWE2YmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n+mdYfJB6iKDNwNiy/zgqTs/mnG gHukqoZ1EGURD8nZ+CX0r/jBOyhhvsTiLwNAv3W/B68eBfix55m2/0u6nHvp7fNY HbKSRmLOEM/JVelzJrVo4YyBZNJ4h5Klz+59LdeKc1bTHDYYpKINJSWs+FmkswYJ GdbxcxrULUhkJEne4/HeAesxw2G5mAM4iQ8YfE8dZiDmY/w8gItZn/NHlX1Itbld sxCATcslPwaeB5Lz4lDJFuA5dN4Sd1W8D03PEaqIAu+n6gpnYTmH84zA5eBEj+N+ 6gJDzcn3NN1gVlawe+8h9mw2X1ca/f5WV9xhhf0bb51izgMl4q8xrtXAQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvS1FcNhMJFrKA+iMzC05jGmmvkMB8GA1UdIwQY MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt MmQzOGIzOTNiMTIzLzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAep/8jDlB qlDfRX+5sIK32YO0x0/VeQAsahpRyCPovXqzejPcIdBVsPe9UqGTQVdGNw0EG12m BuXK/d7nQ4GQ1ZWtfHiQkEvdY445RCtYP3Fld9TRsGJrYU5j1V9TWtc9A+Zn+FOn wPNh+7K8hVFl+1+uf0kmRCfLmsyZSIvDTgceWIwmHDbue4zOhjptyPEuORuFtoZ0 zrp2bKTIGT3iq4v0zBYWKdTuB8faEYiIeWQhW4ya+gp0VPky5ijMdX4teMQUXrAK Y/wX47yMTzK3adCar7KKDef1qMWV01uugarp1UY1tj+W5wkIgAStXrIndDUXxw+G g9oR5a9LsWxoQw== -----END CERTIFICATE-----Generated at Sat Sep 26 07:45:45 2026 by rpki-client